Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up…Check if you run itEPSS 0.12%Dec 5, 2025
- Critical9.8The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plugin for WordPress is vulnerable to authenticati…Check if you run itEPSS 0.50%Dec 5, 2025
- Medium4.3The Torod – The smart shipping and delivery portal for e-shops and retailers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an…Check if you run itEPSS 0.15%Dec 5, 2025
- Medium4.4The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient i…Check if you run itEPSS 0.20%Dec 5, 2025
- Medium6.1The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to i…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The dream gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Dec 5, 2025
- Medium4.3The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.Check if you run itEPSS 0.15%Dec 5, 2025
- Medium4.3The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7.Check if you run itEPSS 0.16%Dec 5, 2025
- Medium4.3The Image Optimizer by wps.sk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Dec 5, 2025
- High8.8The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery i…Check if you run itEPSS 0.33%Dec 5, 2025
- High8.9LaraDashboard is an all-In-one solution to start a Laravel Application.Open the advisoryDec 4, 2025
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Open the advisoryDec 4, 2025
- Low1.9A vulnerability was identified in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.28%Dec 4, 2025
- Low2.0A vulnerability was determined in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- Low2.0A vulnerability was found in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- Medium5.5A flaw was found in ansible-collection-community-general.Check if you run itEPSS 0.19%Dec 4, 2025
- Medium6.5An Improper Input Validation vulnerability exists in the user websocket handler of MAAS.Open the advisoryDec 3, 2025
- Low2.9A vulnerability was determined in opsre go-ldap-admin up to 20251011.Check if you run itEPSS 0.30%Dec 3, 2025
- Medium4.3The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1…Check if you run itEPSS 0.24%Dec 3, 2025
- Medium4.9The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.32%Dec 3, 2025
- Critical9.8wpdirectorykit wp_directory_kit Incorrect Implementation of Authentication AlgorithmPatch nowKEVEPSS 4.55%Dec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- Critical9.8The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.37%Dec 2, 2025
- Medium5.1Directory traversal vulnerability in SOLIDserver IPAM v8.2.3.Check if you run itEPSS 0.54%Dec 2, 2025